skysight-inc/HackerNews huggingface dataset:
Interesting article and all very true. Though for most the security of not having routable IPV6 be it your network setup or your ISP not supporting it is one that could change outside your control or you even knowing. Not inpossible for an ISP to roll out IPV6 support alongside IPV4 and to do it silently.

With the trend to streaming TV and movies over the internet, the prospects of seeing IPV6 supported become more and more appealing, at least from the multicast aspect were it truely has appeal over IPV4 and with 4g growing I'd be supprised if a majority of 4g networks don't support IPV6.

Problem is sites wont migrate/support IPV6 until users appear in numbers and that wont happen until they are given no choice and you see how IPV6 realy has taken hold as fast as it has :(.
By this logic we should also be highly suspicious of the claims that he lied.
I might be missing something.

J. Random Hacker from Waziristan hacks your account at the lock company.

So? He is _there_ and you are _here_. Annoying but not fatal.

Unless you're worried that he has a cousin in town?
In fairness, their policy changed (about 6-12 months back), that if there's a transaction dispute, you're locked out of only the game with the dispute (and temporarily banned from buying new games). You can still use your existing ones.
" It's not very intuitive that only people you follow can message you."

I am a very, very sporadic user of twitter - I've tweeted maybe 40 or 50 times, and one of the very few things I know about it, is "You can't DM somebody who isn't following you"

Nothing to do with intuition - the client gives you a big fat message saying so the first time you try and do it.

My understanding from the article is that this Traynor was a twitter veteran - and I'm guessing somewhere on the order of 99% of frequent twitter users, and DMers know this.
Strange logic or comprehension problem. How did the author go from "does not work in all cases" to does not work at all? Is he really ready to stake his reputation on the claim that an IP address can NEVER lead to an individual's home address?

"(NOTE: this does not work in all cases but even a general location is a piece in the puzzle when tracking a troll.)
The late addition of this note to ‘Tracking a troll’ only confirms what has just been explained in this article – that an IP address does not enable you to identify an individual’s home address. An author whose article was specifically referenced by Traynor as ’proof’ of his home address claim, has had to admit that the method given in his article does not actually allow you to identify someone’s home address"
David Blaine's 72-hour, million-volt endurance test
Quora is/was super relevant to "realtime web" design people -- it was one of the first really interactive realtime apps for a while, along with Asana. It's the kind of stuff you can do with Meteor now.
Does Schneier really recommend Serpent to avoid XSL-type attacks? As far as I remember, XSL also applied to Serpent.
This doesn’t actually refute your concerns but we’re also in a time with more amateur authors than ever with a lot of them unable or disinterested in making their points succinctly.
He said "my new favorite word," not "my favorite new word." You could have linked to your potentially-of-interest article without taking a jab at the original commenter.

edit: This is what I get for leaving pages open and coming back to them later.
Add Eventbrite Tickets to Passbook on iOS 6
If Obamacare provides the economic safety net that lifts poor black families into the middle class, and makes healthy (including biological evolutionary indicators like teeth, skin, and hair radiance) and basic-wealthy black people the more common sort of black person someone sees, then yes, it will tend to counteract historical racism.
Heh, I am constantly fretting over the pacticality of the location and contents of my Go Gear...

I am checking and practicing grabbing [defensive item] often, worried that I am testing it wrong, i.e. that if it happens where I need that [defensive item] that I have placed it in a non-practical place.

I'd love to have a security consultant review my go plans and assist.

My moms house was broken into last night, and she awoke to someone stealing her laptop. She was just diagnosed with cancer and has a trach in right now - so it was super scary for her - because even in that instance, she cant even yell for help. The ADP alarm system failed her and my brother was MIA.

PROTIP: I go to the DAISO Japan store and buy little cargo zipper bags to organize all my tech work gear. Console cables, dsiplay adapters, USB charges etc in one - zip ties velcro, sticky-velcro etc in another. laptop chargers in others...

The DAISO store in SF Japan town is amazing for just this sort of thing.
I think that's the point.

Cox (and my understanding many other ISPs as well) CHARGE for static IPs, but give out dynamic IPs that basically never change because it is actually just easier for them to set the service up that way.

The few times the IP address changed was when they did an upgrade at their site, a very long outage, and I think a time when an installer screwed up a neighbors installation.

I cannot guarantee my address tonight will be what it is now, but the reality is, it will be.

I believe (stress no real evidence of this) that my home router tries to give out the same IP addresses to the same MAC addresses. I say this because after I reboot the router, my various machines will pop up at the same IP addresses they had before (and none of them are Apple products known to do this on purpose.)
A significant part of what you're missing is that the function of the actions of the racist manager is to rob the author of political power. Racism works in some pretty subtle subtle ways - by painting the author as 'that aggressive black guy', the manager has already clipped his wings.

You may have also missed this line: After years of arguments with white men (and white women), watching white men (and white women) move away from me when I start to talk about oppression (i.e. what life as a poor black queer is like), I know when to pick and chose my battles

Can you not see just how exhausting it would be to have to constantly explain and justify yourself?
"Chavs" and "thugs", are similarly reviled, yet chavs are the same skin tone as the majority. Race and class and style are interconnected.
Ugh, "industry/strategic investors" tend to suck a LOT, at least for early stage. Google doesn't suck, Google Ventures sucks. Intel doesn't suck (in most ways), Intel Capital is ok but would have to be amazing to be as good as Intel is at chipmaking, etc.

Cisco, which has one of the best acquisition strategies of all times, isn't a VC -- you go outside to get VC, even if your staff and product is all stuff people from within Cisco mostly thought up (which some investors have complained about)... if it goes well, Cisco is a natural acquirer.

The problem with taking a strategic in your first round is that there's an implied option preventing any other strategics from investing later or buying you out or in some cases even using your product (especially if adopting your product has a large investment/risk).
>actually just going to a browser on a phone. There are more people doing that than the iPhone and all of Android phones combined, right? So it's actually a pretty diverse ecosystem.

I can't make sense of that quote. More people are on the mobile web version than there are iphones and android phones combined. Either very few people are on native apps, or there are sizable WinPhone and Blackberry componets.
“Lost” Steve Jobs Speech: Wireless Networking,iPad,&App Store (1983)
Moving away from Drupal was one of my biggest steps forward as a web developer.

I worked with Drupal full time for a little over two years. I spent much of that time clicking around in config screens, and when I did have to get my hands dirty with some custom code, I usually felt like I was just stumbling around in the shadow of the behemoth that is Drupal's API. I thought, "Surely this isn't what web development's supposed to be."

Turns out I was right. On recommendation from a developer friend, I started experimenting with a bit Rails, tried a couple of "proper" PHP frameworks, and then discovered Python and its excellent web development ecosystem. That's when it really started to click for me—all these pieces that Drupal had so kindly obscured from me started falling in to place. Rather than trying to push around a monolith, I learned how to keep things lightweight and use only the pieces I needed. And importantly, I was actually writing code. Sweet, readable, maintainable, version-controllable code. None of this "serialize a hugely long options page and dump it all in the DB" stuff. (On a side note, learning git was another big catalyst for my move away from Drupal. D6 always felt like a pain to track in a VCS, especially when I was collaborating with another developer—though the situation may be improving.)

I should point out: I think a big part of my frustration was the fact that many of the sites I was building didn't need something as big as Drupal. I've since found WordPress to be a better fit for most of the "easy" stuff, or even static HTML/CSS if it makes sense for the project. When I'm building something more complex, well, there rarely seems to be any reason for me to use Drupal anymore.
The article references the Sioux City Crash, aka United Flight 232. If you've never read it, this speech by that flight's captain (Al Haynes) is spellbinding:

http://www.clear-prop.org/aviation/haynes.html
California Governor Vetoes Landmark Location-Privacy Law
My takeway: Building a good responsive webpage requires significantly more engineering resources and expertise than most people have access to. Just to accomplish one responsive page required a team of engineers experienced in the full front-end stack along with industry experts to lead them.

What if in the near future only large businesses like Microsoft will have the resources to produce responsive websites? What does this mean for small lean startup teams?
It looks to me like Traynor understood that the follow-backs enabled the DMs, but resisted changing his behavior (at first) to not let the troll win. If the follow-backs sometimes led to nice exchanges with new friends, it's reasonable to hope the troll would tire, or that handling via unfollow/Twitter-reporting would be enough, before going full "shields up".

The way Traynor describes it, after he eventually went fully private on Twitter, the harassment moved to other forums.
This article might just do that. The article itself already talks about how Steve was completely dismissing everything he had to say. But in written form with a semi-anonymous target, the article will likely filter back to the company and to Steve. In written form, the author gets to say everything he wants to say and why. If Steve reads it, in all likelihood he will dismiss it, but it may also provide a nugget around which he may start to see what he was doing.
Ultrabooks are dead?  Then why are they outselling Apple's entire laptop line?
I am a multimillionaire AMAA
> But after you've received some hate messages, it also sounds like the kind of thing that you'd learn pretty quickly.

He can't know in advance if he has a troll following him, and he likes to reciprocate followers. Should he, in a sense, penalize followers because of a troll?

I don't see anything in the original story about the delay between July 2009 and making his twitter account private. Is there anything to think it was years rather than weeks?
Precisely. I'm not entirely sure how deep your site goes, but assuming it's like the actual stock market, one could potentially game the system by creating two separate accounts and making a series of investments with one, and by shorting those exact same investments on the other; One of the accounts is guaranteed to go up.
Privilege is very poorly understood.

In part that is an ironic consequence of privlege: understanding it can lead to giving it up.

The word has become a "PC" signifier technical "term of art, and not often patiently and respectfully explained to people who need to understand it.
"it's doubtful that lockitron even knows what it's unlocking"

What about if they have a security breach and a command is issued to unlock all locks (or a large number of locks) not a specific target.

Then you have a bunch of doors that are open and the chance certainly exists that random people will enter those doors because they are unlocked.
I haven't checked, but I would think Amazon Glacier, assuming you only need to long-term archive the data.
Yes, both of these UI features would reveal the fact that this username or email already exists.

But isn't it impossible not to reveal it on the signup page anyway? You want users to have unique usernames (or emails acting as usernames), therefore the signup form has to tell them if it has been already taken.

My suggestion would be to tell users if the username or email is unknown right away - and perhaps add a captcha if they are trying out too many different usernames.
What is the earth explodes? Earth was designed to keep the very hot stuff inside a very hard container. If we break this container by drilling through it, the hot stuff will explode and humanity will get hurt.
Sean Parker: Now Is the Most Toxic Time Ever In Silicon Valley
I am probably in a minority but for me, my Facebook and gmail is more valuable than almost all other accounts. When I see a site that forces me to sign up using Facebook or a google account, I usually hit back. Why? Because in my mind I'm giving access to my entire Facebook to a bunch of guys I know little about. I'm not as fearful that these guys are evil and may directly harm me. I'm more fearful they will post something to my timeline or that they may repost say my public posts for SEO etc.

This is one reason I am extremely pissed at instagram. Instagram as a product gives you a sense of privacy because it provides very limited ways to access your photos. You can't just goto instagram.com, login and begin browsing. On the other hand, few people realize that your instagram pictures are public by default and there are dozens of sites which using instagram's API(I'm guessing) are republishing our photos without even your knowledge.
He does it just for kicks. And he does it for multiple targets. The more targets, the more chance he gets to read about his success in the news.
A pointer is just a number
There's a difference between racism and prejudice. You need to learn it.
> In my experience, Drupal is ideal for cheap clients who want a zillion features but don't have the budget.

IE - customers you don't really want to be stuck with in the first place.
If I am having a conversation with my friend about struggles he's having with his boss, and you come in and start talking about how difficult is is to hire good people, you're being an asshole. It's not wrong to talk about hiring, but you're a jerk if you insist on derailing our conversation.

Now being a jerk isn't so awful. But we could just walk away and have our conversation in private, right? It's a free country after all.

But when this kind of derailment happens over and over again to the point that no matter when or where you bring it up, SOMEONE finds a way to derail the conversation, it starts to become oppressive. At that point the community is conspiring to prevent people from discussing racism.

And so we implore you to decide, FOR YOURSELF, that you would like to join us in making space for real talk about racism. The notion of "self-censorship" is nonsense. We all have free will and and we can decide what to speak about. I'm not going to get the government to silence you, I'm asking you to understand the effects of your words and to take responsibility for them.
Sounds like I misinterpreted what you were asking. Yes, those are some tricky problems. It looks like our best choice for a longer-term answer is Persona, but it'll be a while before it's as slick as it should be. :-(
I can't even imagine this kind of shit in a professional environment and for some naive reason figured it never happened in a place like SF (I live in a rural North Carolina town).

Maybe this is a dumb response, but I'm immediately led to wonder if this has anything to do with it being in QA. I have a friend who worked in QA at a game company and, while he never mentioned witnessing such racism, he did describe a shocking amount of disrespect and hostility and a widespread attitude that HR would do absolutely nothing to deal with it. Again perhaps it's a silly thought, but maybe when your barriers to entry are "hey do you play videogames" and you're picking up anybody off the street, you aren't going to create the best team.
Requires facebook or twitter login -> nonstarter
Traynor did change his behavior: but when he unfollowed one account, another took its place. It took him a while to change his habit of an optimistic follow-back -- if some of his follow-backs resulted in pleasant exchanges with new friends, why wouldn't he try to outlast the troll for a while? -- but it's clear he eventually did.

And Traynor reports that when he made his Twitter account private, the harassment moved to other forums: Facebook, blog comments, email.
few things don't add up here.

1. they added the social buttons late in the game, and are surprised about 4% of users are using the social buttons. what if that 4% was compromised entirely of users who registered since you added the buttons? that would be a totally different ballgame.

2. the problem they were trying to solve was login errors. that's not the problem facebook and twitter sign in solve. therefor it seems fallacious to say "they aren't worth it" when you're not even considering the standard use case.
A Study in Adaptive Game Design
you might want to remove your sample page on your blog

http://blog.jetstrap.com/sample-page/

it's accessible from the footer - SAMPLE PAGE link.
The numbers I quoted are what I've worked for recently, as a freelance contractor. In terms of salaried positions, in NYC right now, the almost-top end for developers is around $130,000 a year. Anything above that tends to involve some management responsibilities. I have seen offers of $150,000, but that is for the team lead who is expected to also be a semi-manager.

I say "almost top end" because I am not including places like Google, where the top engineers make a lot more. I think my numbers are accurate for the vast majority of corporate jobs in NYC right now -- I get contacted by a ton of recruiters so I have a decent sense of the current situation. But I realize there is a small elite of tech companies who hire the highest elite of programmers, and the salaries there are probably above what I am seeing.
Dear media: It's pronounced 'ketchup'.
I only tangentially follow the semiconductor companies...

However, I know several advanced algorithms in the realm of cryptography can be computationally expensive, and as demand for security grows, several of these semiconductor companies have implemented things in the hardware to optimize certain forms of encryption. (I can't remember if it was Intel or AMD that released a chip with some sort of built-in support for security).

This is just a theory, but if they're going down this road, it would make sense for them to develop a highly secure algorithm that they know can be easily implemented and optimized on the hardware level. If they're developing specialized algorithms AND hardware, they can probably take it into account during the design process and further optimize their boards.

Or, a bunch of semiconductor guys are also crypto-geeks. Which is pretty likely anyway :D.
Multicast is disabled on the Internet BTW.
They are all cryptographers and at least three of them have deep academic backgrounds...

Guido Bertoni: http://www.informatik.uni-trier.de/~ley/db/indices/a-tree/b/...

Joan Daemen: http://www.informatik.uni-trier.de/~ley/db/indices/a-tree/d/...

Gilles Van Assche: http://www.informatik.uni-trier.de/~ley/db/indices/a-tree/a/...

Joan Daemen has a PhD, his thesis was "Cipher and Hash Function Design. Strategies based on linear and differential cryptanalysis"

Gilles Van Assche was a PhD student at the University of Brussels studying "classical and quantum information theory" (http://gva.noekeon.org/)
Since pricing was brought up, I don't like that there appears to be no way to find out the price without signing up for the free trial. It gives the impression it's so expensive you're hiding the price. I don't want to sign up and play around only to find out it's out of my price range.

edit: This might just be because you're in beta and haven't settled on a price though.
I have cox as well and my IP only changes when:

1) My cable modem has been offline for a while (e.g. power failure)
2) My subnet changes, which has happened twice in 6 years.
Following this line of funny ideas, I'm betting that some followers of the Hollow Earth Theory[1] must be thinking:

"bah, more money spent to perpetuate the fiasco, why don't they just enter through the poles?"

And yes, there are still quite a few people believing this.[2]

[1] http://en.wikipedia.org/wiki/Hollow_Earth

[2] http://www.google.com/search?q=hollow+earth+conspiracy,

http://www.atlanteanconspiracy.com/2011/01/hollow-earth-evid...
No, it's pronounced "ketchak". See http://keccak.noekeon.org/specs_summary.html .
> It will be the equivalent of dangling a steel string the width of a human hair in the deep end of a swimming pool and inserting it into a thimble 1/10 mm wide

Can someone clean up this horrible analogy?
Your mom can treat keypair as just another password thing. With the nice exception that she would never have to type it, just click on "sign in as (name)" button and browser/GPG agent combo would do the rest.

I'd note there are tons of solutions involving key escrow, so synchronization and recovery are not problems.
I actually have a paper published on this subject [1], except we use models that have a basis in epidemiology. That article is unfortunately behind a paywall, but here's an unbranded copy of an early draft of the paper [2].

We base our work off of the classical SIR model [3], which we extend to include the possibility of reinfection (since it's possible to become reinfected with a meme after initially losing interest). The key features of the SIR model is a rate of infection proportional to the social interaction between infected and susceptible individuals, where infected individuals gradually lose interest (or not, depending on how the parameters are set).

With appropriate values for parameters, our model can very closely fit the characteristic curves from viral infections, particularly those with an initial large spike followed by a gradual taper, as you can see from these Google Trends data [4]. The model can also be used to predict future infection levels (assuming no change in system dynamics).

[1] http://www.sciencedirect.com/science/article/pii/S0307904X11...

[2] http://stash.synchroverge.com/files/viral_memetic_model.pdf

[3] http://en.wikipedia.org/wiki/Compartmental_models_in_epidemi...

[4] http://www.google.com/trends/explore#q=two%20girls%20one%20c...
A one-line comment of 'dumbwhite' while not being named now constitutes "having your head bitten off on the public internet"? Calm down, get some perspective.
This is why http://drupal.org/project/features module was born. To allow you to export your functionality to code and have it under version control.

Features and things like http://drupal.org/project/drush_make is what makes a lot of the drupal distributions (http://drupal.org/project/distributions) that keep popping up because sourced controlled, feature driven development is now possible in drupal.

Also the testing part has been improving, and although very few of the contrib modules have tests most of core has automatic testing in place for when you submit a patch as you can see in the issue queues (http://drupal.org/node/466576).
[removed because vacri's comment clearly expresses what I was going for incoherently]